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OROSSMFERENCEULK^^ 

, nf „o serial No. 09/997,021, filed 
1001] Thisisacontinuation-m-partofU S.SenalN ^ 

November 28, 2001, which is a continua^on-in-part of U.S. 
filed October 27, 1998. 

im ^e^n^esse^,— a an„ — of 
ZL s « h as «U - in minin, and seisnic *PP™ 

BACKGROUND 

.spec* <™^«-' sMi " Cl ^^ te " e T'"l to l stools are 

to ensure that the expiosiv Mr , ec iallY radio frequency 

• * o ,,,..11 <:ite is the use of wireless, especially w« 
concern that exists at a well site is tne exo i os ive devices. 



others. 



tools as well as with other types of tools. Also, an 

SUMvIARYOFTHEKfflim 

description, the drawings, and the claams. 

[009] Fi , 1 is hloc* dia^n of an example anan^nt of control systems, sensors, 
and a downhole well tool. 
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can be used in the system of Fig. 1 - 

,00,,, Figs . 3A-3B « a flow <*- — — ^— * ' — ™" 
accordance with an embodiment. 

l00121 Figs 4 aud 5 '« — - — " f ' 

perforating tool. 

may be possible. 

^ . ,he terms "up" and "doW; ""PP<^ md " lower " ; 
(001 „ As used here. ft. «- P ^ ^ md 

right, right to left, or other relationship as approbate. 

, . tftFie x a system according to one embodiment includes a 
[0016] Referring to Fig. 1, a sysxem e 

/ it I00thatiscoupledbycablel02(e.g.,awireline)toatooll04. In 
surface unit 100 ft*. P ^ ^ & ^ For exampl c, the 

example shown in Fi , 1^ - ^ ^ 

tOOll04 ^ mClUdea "inofterembo^ 
such as pipe cutters and the like, to om 

beusedforperformingothertypesofoperationsmaweU. Forexamp 



„, h er types of «* include roots for seuing packers, owning or Costng va,ves 

— — ■ « — ^ S ° In *" " 
ZiL WC safety issues associated witr, we,, ** containing exp.os. e 

2- ere discussed. However, simi,ar medrods and apparama can be app,.ed to 
,„o,s having e*p,osive devils in other appiicanorts, e.g., mining, setsmto 
acquisition, surface demolition, armaments, and so forth. 

,00,7, The too, ,04 includes a safety sub ,06 and a plura,i.y of guns ,08. In one 

does not include explosive devicesthatare present in the guns 1 08 . The 
,06 serves one of severs, Ptoses, inCuding providmg a q u,oK com.eo.on of the 
rt ,04.te- •.«««• Addi.io M ,,y,m.^sub,06a,,ow S e— 
Tig of the porfomtmg too, ,04 dowoho,. of a, the surface. Beoause rhe 

^ sub ,06 does no, ^ erosive devices, u provides ■ «* » 

b etwL Ore cab,e ,02 and the guns ,08 somatomes, a^afton of ftte*urs 



connection. 

t 00,„ ,o me e*amp,e of rigcre ,, the cab,e ,0Z is rmt through . ™noh assembiy 
U0 Ihichiscoupiedtoadepttsensorm. The depm sensor 1U -tutors «» 

lion of me wmch assemb.y „ 0 to de.em.ne me depm of me perforattng too, 
ridamreiatmg tome depthofdteroo, ,04 is oonrnrumoate.to me surface 



unit 100 



unu iw. 

,00,9, m some systems, an interna, (hardware or software) drive system can be 

evenmoughmetoo.misstmatmeearmsurftoe.ThedeptbsensorUaoanbe 
Ihymrsurfaceumt.oveHfyma.metoo.^hasindeedbeen.oweream^ 

II weUbore to a target depth. As a safety precaution, the to ~ ^ 
of ftte internal hardware or drive system to e„ab,e activafton of me too, , 04 
prohibited. 



,0020, The perfora.ing.oo, ,04 also Modes a number of sensors, soch as sensors 
, ,4 in toe safety sob and sensors 1 16 in <he guns ,08. AUhough Fig. , shows 
«* gon ,08 as contoining sensors 1,6, less than a,, of the guna oanba selected 
include sensors in other embodiments. 

[0021, Da* from toe sensors 1 14 and 116 are commumcmed over «. ceb,e 102 Jo 
a.ogUo.odu.anO^eswf.caoni. 100. The logging modu,e ,20,scapab,e 
of performing bi-directional communications wim one sensors 114 and 1 16 over 

me cable 102. For example, d* loggmg module .20 la able to issue e— to 
toe senaorslM^l.Sto^etoeas—, and mo loggtog module ,20 ,s*e„ 

ao.e.oreceiven.eaauremen.da.afromtoesensorslMandll^Datooolleoredby 

toe logging mod»,e ,20 is s«ored in a storage ,22 in the surface un« ,0O 
Examples of toe storage ,22 inotode magnetic nrediaXe.g., ahard Utah dnve), 
opuoa.^aCe.g.aootopae.diskordiglto.veraadle disk), semiconductor 
memories, and so forth. The smface urn. 100 a*0 includes achvation software 
,24 ton. is executable on a processor 126. The activation software 124 a 
^ible for managing toe activadon of toe perforating. ooll 04 in response to 
x commands. The uset commands can be issued from a number of sources, 
su c h as directly throughout interface ,28 atthe surface 

site systom 130 over a communicadom lit* 132, or from a portable user m.erf.ce 
device 134 over a communications link 136. 

(0022, m one embodiment, to. communications lings ,32 and ,36 include 

toe Almmauvely, toe comtnunicalions lings 132 and 136 me wired bugs 
The surface unit 100 includes a communications interface 138 for cnmmuntcattng 
with toe user interface device 134 and Ihe remote site systom 130 over the 
respective ling, The remote she system .30 also includes a communicattons 



• nation logging information, etc.) associated with the 
information (e.g., status information, logging 

surface unit 100. 

,00,3, The user interface device ,34 a,so inches a communications interface ,44 

lanicatias over the communications link ,36 with me surface uatt ,00. 
forcommameatmg 134 includes a display 146 m enable the 

Additionslly, the user utterf.ee devtce ^^pie of the 

imerfac device ,34 includes a laptop or notebook computer. 
, TO4) ,„ a— e with an embodiment, a security feature of *e surface urn. 
21 smart card interface ,48 for in— wim a smart card o, , use. The 
! arTterfaee 148 is capable of tending identification information of ft. . 
r atl siUhtre a user code, an empmyee number, and so forth). The 
^ ( 2TZ uses mis id.ntf.oa.on information to determine if m. user 
"T^^Z surfaceuni, ,00 and m perform aoUvation of me 
is authorized to access uie & "authorization 
perforadngtool 104. The idensiftoation info^anon , sport of the ambo 

code" provided by a user to gain access to the surface urn. 100. 

,0025, A sm*t card is bosieaUy a card with an embedded prooeaaor and storage, 

Soch infonnation moludes a digita, signature, a uae, ptoftle, and so forth. 
MM in rat altemauve embodiment, instead of a smart card interface ,48 m. 
Te oni, ,00 car, melude another type of aeemdry feature, such as proving a 

embodiment, me security mechanram of d> surface urn 
. . ^ cdCTic etosoanabiomemofeamre(e.g.,fmgen>nnt)ofmenser. The 
btometrtc devrce .OS , smart ^ reao6t or btometnc 

user interface device 134 can simu<u y 



input device. 
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• i enters information and commands using either the 

( 0027] Alternatively, the user enters 

user interface device 1 34 or the remote stte system 130. The user 
Z may Nt -re an authorization code, such as in me form of a user code, 
L Ignarme, and me .ike, mat is communicated m me surface urn, . 00 wuh 

.Lace devices ,34 are ablemissue—smatare acred 

unit ,00. AUhough no, showu, the user interface device 134 

include a smart card interface to interact with the smart oard of me use,. 

,0028] in me example shown, me remote site system 130 also includes a smart 

c^d interface 1 50. Thus, before a user is able to issue commands from the remote; 

^system ,30 tome surface unt, .00 ,0 perform vartous action, me user must he 

..possession of a smart c*d dm, enah.es accesa ,o the various fearures provded . 

by the surface unit 100. 

,0020, fn mis way, the surface unit 100 oanno, be accessed b, unamhortaed users, 
tool 104 is avoided. 

,0030, Anomersrfetyfeao.eofferedbymepertoratingtoo. 104 isms, each of the 
T.0S la associate* with a uni q ue code or .dentition This code or ttientiti* 
Z. be issued by the surface unit 100 with an activate command for tire gun 108 
Z JZ d. f ,he code or identitier is notprovided, men tine gun 108 cannot 
TZ Thus, if me perforating too, .04 is stolen or is losti unaumormed users 
l^he ahll .0 activate tine guns ,08 since they do nor *no„ what *e codes or 

i d emif,erma t m«bereoeivedby t he S afe t ysub,06for,he S afe V subl06mbe 

activated to electrically arm the perforating tool 104. 

[003 „ Anotherfearureatiowed by using unique codes or identifers for tite guns 
,„ 8 i! ,ha, me guns can be haced (to cnab.e me caching of .0, or nua P .aced 
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Z «-« «, know equipn-en. * - <»—-• 

nttl V« another safe, M» associated with the guns 10. -cording to one 

• wrh wireless signals, such as RF signals, are present. As a 

^ , „.,ool 104 withprecautiomlatmtoavo.doseofRF signals. 
EFI detonator is one example ol an eic^u ^ 

semiconductor bridge detonator, hot-wire detonator, andsoforth. 

rocr Another feature offered by the surface unit 100 according to some 
[00«] Another ^^cuve" activation of the perforating 

embodiments is the abihty to perform mteracUve ^ 
tool 104 The "interactive" activation feature refers to the abdxty to comm 

ov „ Wa n* condition exists prior ,0 p— , «^ ^ ^ 

•t i HO is able to interact with the depth sensor 1 12 to deterrmn 
surface umt 100 is able to ^ ^ ^ ^ 1Q4 „ 

depth of the perforatum tool 104. Tins is to 
notactivatedpriortoitbeingatasafedepthinthewellbore ■ 

be prevented from artificially setting the depth of the 
precaution, a user will be preven . ^ some systems, 

perforating tool below a predetermined depth for p«P 
Lhadepthcanbesetbysoftwareorhardwaretosimulatethetoolbe 
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wellbore. However, due to safety concerns, artificially setting the depth to a value 
where a. gun is allowed to be activated is prohibited. 

[0034] The sensors 1 14 and/or 1 16 may also include voltage meters to measure the 
voltage of the cable 102 at the upper head of the perforating tool 104, the voltages 
at the detonating devices in the respective guns 108, the amount of current present 
in the cable 102, the impedance of the cable 102 and other electncal 
characteristics. The sensors may also include accelerometers for detecting tool 
movement as well as shot indication. Shot indication can be determined from 
waveforms provided by accelerometers over the cable 102 to the surface umt 100. 
Alternatively, the waveform of the discharge voltage on the cable 102 can be 
monitored to determine if a shot has occurred. 

ro035]-The sensors 114 and/or M6 may also include moisture detectors to detect if 

excessive moisture exists in each of the guns 108. Excessive moisture can nuhcate 

that the gun may be flooded and thus may not fire properly or at all. 

[0036] The sensors may also include a position or orientation sensor to detect the 

position or orientation of a gun in well, to provide an indication of well deviate, 

a ndtodetectcorrect P o S i ti oning(e.g.,lowsideofcasing)beforef 1 ringthe g un. 

Also the sensors may include a strain-gauge bridge sensor to detect external strain 
on the perforating tool 1 04 that may be due to pulling or other type of stram on the 
housing or cable head of a gun that is stuck in the well. Other types of sensors 
include acoustic sensors (e.g., a microphone), and other types of pressure gauges. 
[0037] Other types of example sensors include equipment sensors (e.g., vibration 
sensors), sand detection sensors, water detection sensors, scale detectors, viscostty 
sensors, density sensors, bubble point sensors, composition sensors, mfrared 
sensors, gamma ray detectors, H 2 S detectors, C0 2 detectors, casing collar locators, 
and so forth. 
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[0038] One of the aspects of the sensors 1 16 is that they are destroyed with firing 
of the guns 108. However, the sensors 1 14 in the safety sub 106 may be able to 
survive detonation of the guns 108. Thus, these sensors 1 14 can be used to 
monitor well conditions (e.g., measure pressure, temperature, and so forth) before, 
during, and after a perforating operation. 

[0039] In addition to the sensors that are present in the perforating tool 104, other 
sensors 152 can also be located at the earth surface. The sensors 152 are able to 
detect shock or vibrations created in the earth due to activation of the perforating 
tool 104. For example, the sensors 152 may include geophones. The sensors 152 
are coupled by a communications link 154, which may be a wireless link or a 
wired link, to the surface unit 100. Data from the sensors 152 to the surface unit 
100 provide an indication of whether the perforating tool 104 has been activated. 

[0040] The safety sub 106 and guns 108 of the perforating tool 104 are shown in 
greater detail in Fig. 2. In the example shown in Fig. 2, the safety sub 106 
includes a control unit 14A, and the guns 108 include control units 14B, 14C. 
Although only two guns 108 are shown in the example Fig. 2, other embodiments 
may include additional guns 108. Each control unit 14 is coupled to switches 16 
and 18 (illustrated at 16A-16C and 18A-18C). The switches 18A-18C are cable 
switches that are controllable by the control units 14A-14C, respectively, between 
on and off positions to enable or disable current flow through portions of the cable 
102. When the switch 18 is off, then the portion of the cable 102 below the switch 
18 is isolated from the portion of the cable 102 above the switch 18. The switches 
16A-16C are detonating switches. 

[0041] In the safety sub 106, the detonating switch 16A is not connected to a 
detonating device. However, in the guns 108, the detonating switches 16B, 16C 
are connected to detonating devices 22B, 22C, respectively. If activated to an on 
position, a detonating switch 16 allows electrical current to flow to a coupled 
detonating device 22 to activate the detonating device. The detonating device 
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22B, 22C includes an EFI detonator or other detonators. The detonating devices 
22B, 22C are ballistically coupled to explosives, such as shaped charges or other 
explosives, to perform perforating. 

[0042] As noted above, the safety sub 106 provides a convenient mechanism for 
connecting the perforating tool 104 to the cable 102. This is because the safety 
sub 106 does not include a detonating device 22 or any other explosive, and thus 
does not pose a safety hazard. The switch 1 8 A of the safety sub 1 06 is initially in 
the open position, so that all guns of the perforating tool 104 are electrically 
isolated from the cable 102 by the safety sub 106. Because of this feature, 
electrically arming of the perforating tool 104 does not occur until the perforating 
tool 104 is positioned downhole and the switch 18A is closed. 

[0043] Another feature allowed by the safety sub 1 06 is that the guns 1 08 can be 
pre-armed (by connecting each detonating device 22 in the gun 108) during 
transport or other handling of the perforating tool 104. Thus, even though the 
perforating tool 104 is transported ballistically armed, the open switch 18A of the 
safety sub 106 electrically isolates the guns 108 from any activation signal during 
transport or other handling. 

[0044] Figs. 3A-3B are a flow diagram of a tool activation process, which is 
performed by the activation software 124 according to one embodiment. Before 
access is provided for activating the perforating tool 104, the activation software 
124 checks (at 202) if an authorization code has been received. The authorization 
code includes a digital signature, a user code, a user name and password, or some 
other code. The authorization code can be stored on a smart card and 
communicated to the surface unit 100 through the smart card interface 148. 
Alternatively, the authorization code can be manually entered by the user through 
a user interface. 

[0045] If an authorization code has been received and verified, the activation 
software 124 determines (at 204) the level of access provided to the user. Users 
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are assigned a hierarchy of usage levels, with some users provided with a higher 
level of access while others are provided with a lower level of access. For 
example, a user with a higher level of access is authorized to activate the 
perforating tool to fire guns. A user with a lower access level may be able only to 
send inquiries to the perforating tool to determine the configuration of the 
perforating tool, and possibly, to perform a test of the perforating tool (without 
activating the detonating devices 22 in the perforating tool 104). 

[0046] The activation software 24 also checks (at 206) for a depth of the 
perforating tool 104 in the well. Activation of the perforating tool 104 is 
prohibited unless the perforating tool 104 is at the correct depth. While the 
perforating tool 1 04 is not at a correct depth, as determined (at 208), further 
actions are prevented. However, once the perforating tool 104 is at the correct 
depth, the activation software 124 performs (at 210) various interrogations of 
control units 14 in the perforating tool 100. Interrogations may include 
determining the positions of switches 16 and 18 in the perforating tool 104, the 
status of the control unit 14, the configuration and arrangement of the perforating 
tool 104 (e.g., number of guns, expected identifications or codes of each control 
unit, etc.), and so forth. 

[0047] Once the status information has been received from the perforating tool 
104, the activation software 124 compares (at 212) the information against an 
expected configuration of the perforating tool 104. Based on the interrogations 
and the comparison performed at 210 and 212, the activation software 124 
determines (at 214) if the perforating tool 104 is functioning properly or is in the 
proper configuration. If not, then the activation process ends with the tool 104 
remaining deactivated. However, if the tool is determined to be functioning 
properly and in the expected configuration, the activation software 124 waits (at 
216) for receipt of an arm command from the user. The arm command can be 
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provided by the user through the user interface 128 of the surface unit 100, 
through the user interface device 1 34, or through the remote site system 130. 

[0048] Upon receipt of the arm command, the activation software 124 checks (at 
218) the depth of the perforating tool 104 again. This is to ensure that the 
perforating tool 1 04 has not been raised from its initial depth. 

[0049] Next, the activation software 124 checks (at 220) for various downhole 
environment conditions, including pressure, temperature, the presence of gas or 
liquid, the deviation of the wellbore, and so forth. 

[0050] If the proper condition is not present, as determined at 224, the activation 
software 124 communicates (at 226) an indication to the user, such as through the 
user interface 128 of the surface unit 100, the display 146 of the user interface 
device 134, or the display 142 of the remote site system 130. Arming is 
prohibited. 

[005 1] However, if the condition of the well and the position of the perforating 
tool 104 is proper, the activation software 124 issues an arm command (at 228) to 
the perforating tool 100. The arm command is received by the safety sub 106, 
which closes the cable switch 18A in response to the arm command. Optionally, 
the cable switches 1 8B, 1 8C can also be actuated closed at this time. 

[0052] The activation software 124 waits (at 230) for receipt of an activate 
command from the user. Upon receipt of the activate command, the activation 
software 124 re-checks (at 232) the environment conditions and the depth of the 
penetrating tool. The activation software 124 also checks (at 234) the gun position 
and orientation. It may be desirable to shoot the gun at a predetermined angle with 
respect to the vertical. Also, the shaped charges of the perforating tool 1 04 may 
be oriented to shoot in a particular direction, so the orientation has to be verified. 

[0053] If the environment condition and gun position is proper, as determined at 
236, the activation software 124 sends (at 238) the activate command to the 
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perforating tool 1 04. The activate command may be encrypted by the activation 
software 124 for communication over the cable 102. The control units 14 in the 
perforating tool 104 are able to decrypt the encrypted activate command. In one 
embodiment, the activate command is provided with the proper identifier code of 
each control unit 14. Each control unit 14 checks this code to ensure that the 
proper code has been issued before activating the appropriate switches 16 and 1 8 
to fire the guns 1 08 in the perforating tool 104. 

[0054] In one sequence, the guns 108 of the perforating tool 104 are fired 
sequentially by a series of activate commands. In another sequence, the activate 
command is provided simultaneously to all guns 108, with each gun 108 
preprogrammed with a delay that specifies the delay time period between the 
receipt of the activate command and the firing of the gun 108. The delays in 
plural guns 108 may be different. 

[0055] During and after activation of the perforating tool 104, measurement data is 
collected (at 240) from the various sensors 114, 116, and 152. The collected 
measurement data is then communicated (at 242) to the user. 

[0056] Fig. 4 illustrates a flow diagram of a process of performing secure 
activation of an explosive tool, such as the perforating tool 104, according to one 
embodiment. A central management site (not shown) provides (at 302) a profile 
of a user that includes his or her associated identifier, authorization code, personal 
identification number (PIN) code, digital signature, and access level. This profile 
is loaded as a certificate (at 304) into the surface unit 100, where it is stored in the 
storage 122. During use, a user inserts (at 306) his or her smart card into the smart 
card interface 148 of the surface unit 100. The surface unit 100 may prompt for a 
PIN code through the user interface 128, which is then entered by the user. The 
surface unit 100 checks (at 308) to ensure that a user is authorized to use a system 
based on the stored certificate and notifies the user of access grant. 
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[0057] Next, the user requests (at 310) arming of the perforating tool 1,04, which is 
received by the surface unit 100. In response, as discussed above, the surface unit 
100 checks (at 312) the depth of the perforating tool 104 and the data from other 
sensors from the perforating tool 1 04 to determine if the perforating tool 104 is 
safe to arm. 

[0058] The user then issues a fire command (at 3 14), which is received by the 
surface unit 100. The surface unit 100 then checks (at 316) that the perforating 
tool 104 is safe to activate, and if so, sends an encrypted activate command to the 
perforating tool 104. 

[0059] The control unit 14A in the safety sub 106 stores a private key at 
manufacture. This private key is used by the control unit 14A in the safety sub 
106 to decrypt the activate command (at 318). The decrypted activate command is 
then forwarded to the guns 108 to fire the guns. 

[0060] Fig. 5 illustrates a flow diagram of a process of remotely activating the 
perforating tool 104. In the context of Fig. 1, the remote activation is performed 
by a user at the remote site system 130. In the example of Fig. 5, two users are 
involved in remotely activating the perforating tool 1 04, with user 1 at the well 
site and user 2 at the remote site system 1 30. As before, a central management 
system authorizes user names and their associated information and access levels 
(at 302) and communicates certificates containing the profiles (at 404) to the 
surface unit 100 and to the remote site system 130 for storage. 

[0061] At the surface unit 100, user 1 inserts (at 406) his or her smart card into the 
surface unit 100, along with the user's PIN code, to request remote arming and 
activation of the perforating tool 104. This indication is communicated (at 408) 
from the surface unit 100 to the remote site system 130 over the communications 
link 132. User 1 also verifies (at 407) that all is safe and ready to fire at the 
surface unit 100. 
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[0062] User 2 inserts his or her smart card into the smart card interface 150 of the 
remote site system 130 to gain access to the remote site system 130. Once 
authorized, user 2 requests (at 410) arming of the perforating tool 104. The 
surface unit 100 checks (at 412) that user 2 is authorized by accessing the 
certificate stored in the surface unit 100. This check can alternatively be 
performed by the remote site system 130. 

[0063] The surface unit 100 then checks (at 414) the depth of the perforating tool 
104 along with data from other sensors of the perforating tool 104 to ensure that 
the perforating tool 104 is safe to arm. Once the verification has been performed 
and communicated back to the remote site system 130, user 2 issues an activate 
command (at 416) at the remote site system 130. The surface unit 100 checks (at 
418) to ensure that the perforating tool 104 is safe to activate, and then sends an 
encrypted activate command. The encrypted activate command is received by the 
safety sub 106, with the encrypted activate command decrypted (at 420) by the 
control unit 14A in the safety sub 106. 

[0064] According to some embodiments of the invention, another feature is the 
ability to test the perforating tool 104 to ensure the perforating tool 104 is 
functioning properly. The test can be performed at the well site or at an assembly 
shop that is remote from the well site. To do so, as shown in Fig. 6, a tester box 
500 is coupled to the perforating tool 104 over a communications link 502 through 
a communications interface 504. If the test is performed at the well site, the tester 
box 500 can be implemented in the surface unit 100. At the assembly shop or at 
some other location, the tester box 500 is a stand-alone unit. The tester box 500 
includes a communications port 503 that is capable of performing wireless 
communications with communications port 144 in the user interface device 134. 
The communications can be in the form of ER communications, RF 
communications, or other forms of wireless communications. The 
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communications between the user interface device 134 and the tester box 500 can 
also be over a wired link. 

[0065] In one embodiment, various graphical user interface (GUI) elements (e.g., 
windows, screens, icons, menus, etc.) are provided in the display 146 of the user 
interface device 134. The GUI elements include control elements such as menu 
items or icons that are selectable by a user to perform various acts. The GUI 
elements also include display boxes or fields in which information pertaining to 
the perforating tool 104 is displayed to the user. 

[0066] In response to user selection of various GUI elements, the user interface 
device 134 sends commands to the tester box 500 to cause a certain task to be 
performed by control logic in the tester box 500. Among the actions taken by the 
tester box 500 is the transmission of signals over the cable 502 to test the 
components of the perforating tool 104. Feedback regarding the test is 
communicated back to the tester box 500, which in turn communicates data over 
the wireless medium to the user interface device 134, where the information is 
presented in the display 146. As an added safety feature, the tester box 500 can 
also include a smart card reader or biometric input device to verify user 
authorization. 

[0067] A more detailed description of the tester box 500 and components in the 
perforating tool 104 to enable this testing feature is discussed in greater detail in 
U.S. Serial No. 09/997,021, entitled "Communicating with a Tool," filed 
November 28, 2001, which is hereby incorporated by reference. 
[0068] The various systems and devices discussed herein each includes various 
software routines or modules. Such software routines or modules are executable 
on corresponding control units or processors. Each control unit or processor 
includes a microprocessor, a microcontroller, a processor card (including one or 
more microprocessors or microcontrollers), or other control or computing devices. 
As used here, a "controller" refers to a hardware component, software component, 
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or a combination of the two. Although used in the singular sense, a "controller" 
can also refer to plural hardware components, plural software components, or a 
combination thereof. 

[0069] The storage devices referred to in this discussion include one or more 
machine-readable storage media for storing data and instructions. The storage 
media include different forms of memory including semiconductor memory 
devices such as dynamic or static random access memories (DRAMs or SRAMs), 
erasable and programmable read-only memories (EPROMs), electrically erasable 
and programmable read-only memories (EEPROMs) and flash memories; 
magnetic disks such as fixed, floppy and removable disks; other magnetic media 
including tape; and optical media such as compact disks (CDs) or digital video 
disks (DVDs). Instructions^ that make up the various software routines or modules 
in the various devices or systems are stored in respective storage devices. The 
instructions when executed by a respective control unit or processor cause the 
corresponding node or system to perform programmed acts. 

[0070] The instructions of the software routines or modules are loaded or 
transported to each device or system in one of many different ways. For example, 
code segments including instructions stored on floppy disks, CD or DVD media, a 
hard disk, or transported through a network interface card, modem, or other 
interface device are loaded into the device or system and executed as 
corresponding software routines or modules. In the loading or transport process, 
data signals that are embodied in carrier waves (transmitted over telephone lines, 
network lines, wireless links, cables, and the like) communicate the code 
segments, including instructions, to the device or system. Such carrier waves are 
in the form of electrical, optical, acoustical, electromagnetic, or other types of 
signals. 

[0071] While the invention has been disclosed with respect to a limited number of 
embodiments, those skilled in the art, having the benefit of this disclosure, will 
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appreciate numerous modifications and variations therefrom. It is intended that 
the appended claims cover such modifications and variations as fall within the true 
spirit and scope of the invention. 
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CLAIMS 

What is claimed is: 

1 LA method of activating a tool, comprising: 

2 checking an authorization code of a user to verify that the user has 

3 access to activate the tool; 

4 receiving data pertaining to an environment around the tool; and 

5 enabling activation of the tool in response to the authorization code 

6 and the data indicating that the environment around the tool meets predetermined 

7 one or more criteria for activation of the tool. 

1 2. The method of claim 1, further comprising: 

2 receiving a user command to activate the tool; and 

3 sending an activate command to the tool if activation of the tool is 

4 enabled. 

1 3. The method of claim 2, wherein sending the activate command 

2 comprises sending an encrypted activate command. 

1 4. The method of claim 3, further comprising the tool decrypting the 

2 encrypted activate command. 

1 5. The method of claim 4, wherein decrypting the encrypted activate 

2 command is performed using a key stored in the tool. 

1 6. The method of claim 1, further comprising receiving the 

2 authorization code of the user from information stored on a smart card. 
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1 7. The method of claim 6, wherein receiving the authorization code 

2 further comprises receiving a personal identification number code from the user in 

3 addition to the information stored on the smart card. 

1 8. The method of claim 6, wherein receiving the information stored on 

2 the smart card comprises receiving a digital signature from the smart card. 

1 9. The method of claim 1, further comprising: 

2 providing sensors in the tool; and 

3 communicating data indicating the environment from the sensors to a 

4 surface unit. 

1 10. The method of claim 9, wherein the tool contains an explosive, the 

2 method further comprising providing additional sensors at a well surface to detect 

3 detonation of the explosive. 

1 11. The method of claim 1 , further comprising receiving a command to 

2 activate the tool from a remote site. 

1 1 2. The method of claim 1 1 3 wherein receiving the command from the 

2 remote site comprises receiving the command over a wireless link. 

1 13. The method of claim 1 2, wherein receiving the command over the 

2 wireless link comprises receiving the command over a radio frequency link. 
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1 34. A tool, comprising: 

2 a section having an explosive; 

3 a safety sub having a switch; 

4 a first electrical link coupled to the switch and a second electrical 

5 link coupled between the switch and the section; and 

6 the switch adapted to isolate the first and second electrical links 

7 when the switch is in the open position to disable electrical arming of the section. 

1 15. The tool of claim 14, wherein the section comprises a gun. 

* 3 ^16. A system for activating a tool, comprising: 

2 a controller having an interface to communicate with the tool, 

3 the controller further having a security input unit adapted to receive 

4 an authorization code, 

5 the controller adapted to verify the authorization code; and 

6 the interface adapted to receive data pertaining to an environment of 

7 the tool. 

1 17. The system of claim 16, wherein the controller is adapted to enable 

2 activation of the tool in response to verifying the authorization code and data 

3 pertaining to the environment of the tool. 

1 18. The system of claim 16, further comprising a communications 

2 interface adapted to wirelessly communicate with a remote site. 
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1 1 9. The system of claim 1 8, wherein the communications interface is 

2 adapted to communicate with the remote site using radio frequency signaling. 

1 20. The system of claim 16, wherein the security input unit comprises a 

2 smart card reader adapted to receive information stored on a smart card. 

1 21. The system of claim 20, wherein the security input unit is further 

2 adapted to receive a password from a user. 

1 22. An assembly comprising: 

2 an activation system having an interface and a security input unit; 

3 and 

4 a tool coupled to the interface of the activation system, 

5 the security input unit adapted to receive an authorization code, 

6 the interface adapted to receive data relating to an environment of 

7 the tool. 

1 23. The assembly of claim 22, wherein the activation system is adapted 

2 to enable activation of the tool based on the authorization code and the 

3 environment data. 

1 24. The assembly of claim 23, wherein the activation system is adapted 

2 to receive an activate indication from a user, and to send an activate command to 

3 the tool in response to activation being enabled. 

1 25. The assembly of claim 24, wherein the tool comprises an explosive 

2 device. 
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1 26. The assembly of claim 25, wherein the tool comprises a safety sub 

2 adapted to electrically isolate a section of the tool containing the explosive device. 

1 27. The assembly of claim 26, wherein the safety sub comprises a switch 

2 set to an open position to isolate the section of the tool containing the explosive. 

1 28. The assembly of claim 22, wherein the tool comprises sensors 

2 adapted to communicate the environment data to the activation system. 

1 29. The assembly of claim 28, wherein the tool comprises a perforating 

2 tool. 

1 30. The assembly of claim 29, further comprising a sensor adapted to be 

2 placed at an earth surface to detect firing of the perforating tool. 

1 31. The assembly of claim 22, further comprising a remote system 

2 adapted to communicate wirelessly with the activation system. 

1 32. The assembly of claim 31, wherein the remote system is adapted to 

2 communicate an activate command to the activation system. 

1 33. The assembly of claim 22, wherein the security input unit comprises 

2 a smart card reader. 
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1 34. A method of handling a tool containing a section having an 

2 explosive device, comprising: 

3 providing a safety sub between the section and an input of the tool; 

4 and 

5 setting a switch in the safety sub to an open position to electrically 

6 isolate the section from the input. 

1 35. The method of claim 34, further comprising transporting the tool in a 

2 prearmed state with the explosive device connected in the section. 

1 36. A method of activating a tool containing an explosive, comprising: 

2 receiving, by a security input device, an authorization code 

3 associated with a user; 

4 verifying, based on the authorization code, that the user is authorized 

5 to activate the tool containing the explosive; and 

6 sending, in response to user input, one or more messages to the tool 

7 containing the explosive to activate the tool. 

1 37. The method of claim 36, wherein receiving the authorization code by 

2 the security input device comprises receiving the authorization code from one of a 

3 smart card reader and a biometric input device. 

1 38. The method of claim 36, wherein the tool comprises a perforating 

2 gun, and wherein sending the one or more messages comprises sending a first 

3 message to arm the perforating gun and sending a second message to fire the gun. 
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1 39. The method of claim 36, wherein sending the one or more messages 

2 comprises sending one or more encrypted messages. 

1 40. The method of claim 39, further comprising the tool decrypting the 

2 one or more encrypted messages. 

1 41. The method of claim 36, wherein the tool has plural guns, each gun 

2 having a unique code, and wherein sending the one or more messages comprises 

3 sending the one or more messages containing the unique codes. 

1 42. The method of claim 41, wherein sending the one or more messages - 

2 comprises sending one message to all the guns. 

1 43. The method of claim 42, further comprising providing a delay 

2 element in each of the guns to specify a delay from receipt of the message to firing 

3 of the gun, 

4 wherein the delay in one gun is different form the delay in at least 

5 another gun. 

1 44. The method of claim 36, further comprising providing plural access 

2 levels, wherein verifying that the user is authorized based on the authorization 

3 code comprises determining one of the plural access levels associated with the 

4 user. 
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1 45. A system comprising: 

2 a security input device adapted to receive an authorization code of a 

3 user; 

4 a controller adapted to verify, based on the authorization code, if the 

5 user is allowed access to activate a tool containing an explosive device; and 

6 an interface adapted to be coupled to a link to the tool containing the 

7 explosive device, 

8 the interface adapted to send an activation message to the tool under 

9 control of the controller. 

1 46. The system of claim 45, wherein the security input device comprises 

2 one of a smart card reader and a biometric input device. 

1 47. The system of claim 45, further comprising a storage device to store 

2 authorization information, the controller adapted to compare the authorization 

3 code with the authorization information in the storage device. 

1 48. The system of claim 45, wherein the activation message comprises 

2 an encrypted activation message. 

1 49, The system of claim 45, wherein the activation message comprises a 

2 message to fire a perforating gun in the tool. 
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1 50. An article comprising at least one storage medium containing 

2 instructions for controlling a tool having an explosive, the instructions when 

3 executed causing a system to: 

4 receive, through a security input device, an authorization code 

5 associated with a user; 

6 verify, based on the authorization code, that a user is allowed to 

7 activate the tool having the explosive; and 

8 generate one or more messages to send to the tool having the 

9 explosive for activating the tool. 

1 51. ' A tool comprising: 

2 a gun having an explosive and a sensor, 

3 the sensor adapted to communicate data over a communications line 

4 coupled to the tool. 

1 52. The tool of claim 51, wherein the gun further comprises at least 

2 another sensor adapted to communicate data over the communications line. 

1 53. The tool of claim 5 1, wherein the sensor is selected from the group 

2 consisting of a temperature sensor, pressure sensor, fluid density sensor, moisture 

3 detector, strain-gauge bridge sensor, acoustic sensor, vibration sensor, sand 

4 detection sensor, water detection sensor, scale detector, viscosity sensor, bubble 

5 point sensor, composition sensor, infrared sensor, gamma ray sensor, H 2 S sensor, 

6 C0 2 sensor, casing collar locator, position sensor, and orientation sensor. 
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1 54. The tool of claim 53, wherein the gun has at least another sensor 

2 selected from the group. 

1 55. The tool of claim 5 1 , further comprising another gun having an 

2 explosive and a sensor. 

1 56. A method for use in a well, comprising: 

2 lowering a tool having a gun into the well; 

3 providing a sensor in the gun; and 

4 communicating data from the sensor over a communications line 

5 coupled to the tool. 

1 57. The method of claim 56, further comprising: 

2 providing another gun in the tool; and 

3 providing another sensor in the other gun. 

1 58. The method of claim 56, wherein providing the sensor comprises 

2 providing a sensor selected from the group consisting of a temperature sensor, 

3 pressure sensor, fluid density sensor, moisture detector, strain- gauge bridge 

4 sensor, acoustic sensor, vibration sensor, sand detection sensor, water detection 

5 sensor, scale detector, viscosity sensor, bubble point sensor, composition sensor, 

6 infrared sensor, gamma ray sensor, H 2 S sensor, C0 2 sensor, casing collar locator, 

7 position sensor, and orientation sensor. 

1 59. The method of claim 56, further comprising providing another 

2 sensor in the gun. 
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